[OneRNG-Discuss] OneRNG vulnerable to overheating attacks

Paul Campbell taniwha at gmail.com
Mon Dec 9 22:07:13 GMT 2024


Temperature is interesting, I'm using a different noise generator circuit
for the next release of the OneRNG, mostly I'm changing it to make
manufacturing more reliable. The new circuit is slightly better than the
current one, and is slightly temperature sensitive (at its worst it's still
better than 3.0) I've been running a long term stability test for the past
couple of months and I can see the daily temperature changes in the data -
it's like a 1% change over the room temp change, in this design the entropy
gets slightly better as it warms. I also dropped it in the freezer and it
also wasn't much worse, I haven't tried warmer temps.

- Paul

On Mon, 9 Dec 2024, 15:30 Jim Cheetham, <jim at gonzul.net> wrote:

> I don't think we make any specific claims for operating temperatures for
> the OneRNG, and from my perspective this device wasn't designed to be
> robust to physical attacks, instead it was designed to be verifiable, to
> help the owner detect when attacks had taken place.
>
> I notice this recent Master's degree paper from Ludovica Barsi at
> Università di Padova subjected our device to both cooling to -30℃ and
> heating to 80℃ (they wanted to go higher) and observed that while we worked
> just fine at the lower limits, overheating badly affected the data quality.
>
> https://thesis.unipd.it/handle/20.500.12608/43116?mode=full
>
>
> _______________________________________________
> Discuss mailing list
> Discuss at lists.onerng.info
> https://lists.ourshack.com/mailman/listinfo/discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ourshack.com/pipermail/discuss/attachments/20241209/b5842995/attachment.html>


More information about the Discuss mailing list